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Top Stories 

• The Federal Energy Regulatory Commission used an emergency order instructing 
Enterprise Energy Partners to prioritize supplies on its line from the Gulf Coast to the 
Northeast due to a shortage of heating fuel impacting several States. - Reuters (See item 2 ) 

• A Romanian national was extradited and charged in New Jersey February 7 with allegedly 
being the leader of an ATM skimming group that stole at least $5 million from bank 
customers in four States. - Associated Press (See item 5 ) 

• Rancho Feeding Corporation of Petaluma, California, recalled approximately 8,742,700 
pounds of beef products because it processed diseased and unsound animals without the 
benefit of federal inspection. - U.S. Department of Agriculture (See item 13 ) 

• North Carolina’s environmental agency acknowledged February 9 that they initially 
misread test results February 4 and stated that water in the Dan River was safe after a 
massive coal ash spill when it was in fact unsafe. - Associated Press (See item 14 ) 
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Energy Sector 



1. February 8, Glen Falls Post-Star - (New York) Propane leak forces evacuation; 
investigation continues. Authorities are investigating the cause of a 17,000 gallon 
propane leak from an AmeriGas -owned tank in Wilton, New York, February 7. About 
140 people were evacuated while crews spent 5 hours pumping the liquid propane into 
other tanks before a controlled bum of the vapors. 

Source: http://poststar.com/news/local/propane-leak-forces-evacuation-investigation- 
continues/article ldc0a79c-9 108-1 le3-9346-0019bb2963f4.html 

2. February 7, Reuters - (National) U.S. orders priority propane supplies to ease 
shortage. The Federal Energy Regulatory Commission used an emergency order under 
the Interstate Commerce Act for the first time to order Enterprise Energy Partners to 
prioritize supplies on its line from the Gulf Coast to the Northeast due to the shortage 
of heating fuel impacting several States across the U.S. 

Source: http://kdal610.com/news/articles/2014/feb/07/senators-ask-white-house-for- 
propane-shortage-relief/ 

T Return to top i 

Chemical Industry Sector 

See item 15 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. February 10, Today’s Trucking - (National) Truck manufacturer recalls 21,000 
Kenworth, Peterbilt. Paccar announced two recalls affecting around 21,000 model 
year 2013 and 2014 Kenworth and Peterbilt semi-trucks of various models due to issues 
with door latches and seat belt buckles. 

Source: http://www.todavstrucking.com/truck-manufacturer-recalls-21000-kenworth- 
peterbilt-chassis 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. February 10, Help Net Security - (International) Trojan steals Bitcoins and targets 
OS X. Researchers at SecureMac identified a new trojan dubbed OSX/CoinThief.A 
which infects systems running OS X and monitors Internet traffic in order to steal login 
credentials for Bitcoin wallets and exchanges. The trojan is disguised as an app called 
StealthBit used to send and receive Bitcoin payments. 

Source: http://www.net-securitv.org/malware news.php?id=2702 

5. February 7, Associated Press - (International) Romanian charged in NJ for alleged 
ATM ‘skimming.’ A Romanian national was charged in New Jersey February 7 with 
allegedly being the leader of an ATM skimming group that stole at least $5 million 
from bank customers in New Jersey, New York, Connecticut, and Florida. The accused 
was extradited from Sweden after he fled the U.S. following the arrest of 12 alleged co- 
conspirators. 

Source: http://www.washingtontimes.com/news/2014/feb/7/romanian-charged-in-ni- 
for-alleged-atm- skimming/ 

6. February 7, Softpedia - (National) Bank of America customers targeted in massive 
Bredo malware distribution campaign. Researchers at AppRiver identified a large 
spam campaign capable of avoiding filtering engines that is currently targeting Bank of 
America customers. Spam email messages carry a variant of the Bredo information- 
stealing malware that was identified by only 11 antivirus engines. 

Source: http://news.softpedia.com/news/Bank-of-America-Customers-Targeted-in- 
Massive-Bredo-Malware-Distribution-Campaign-425067.shtml 

T Return to top i 

Transportation Systems Sector 

7. February 10, Chicago Sun-Times - (Illinois) Freight train derails in New Lenox. 
Officials are investigating what caused three cars on a westbound Canadian National 
Railway freight train to derail in New Lenox February 9, hit and damage a stopped 
locomotive on an adjacent track, and block two local roads for several hours. 

Source: http://chicago.cbslocal.com/2014/02/10/freight-train-derails-in-new-lenox/ 

8. February 10, Associated Press - (California) California crash kills 6; driver 
arrested. Six people were killed February 10 after a woman driving the wrong way 
caused a crash on westbound State Route 60 in Pomona, forcing all westbound lanes to 
be closed for about 8 hours. The woman was arrested for allegedly driving under the 
influence. 

Source: http://news.msn.com/us/california-crash-kills-6-driver-arrested 

9. February 9, Johnstown Tribune -Democrat - (Pennsylvania) Dozens hurt in crash. At 
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least 25 people were injured when a Freedom Excursions tour bus crashed into an 
embankment after the operator lost control on Route 220 in Bedford County, 
Pennsylvania, February 9. The highway was temporarily closed while State Police 
investigated. 

Source: http://www.tribune-democrat.com/news/xl072309701/Dozens-hurt-in-crash 

10. February 9, Associated Press - (Florida) 5 killed in wrong way crash in southwest 
Florida. Interstate 275 in Tampa was closed for 5 hours February 9 after an SUV 
traveling the wrong way collided with another vehicle, killing all five passengers in the 
vehicles. Authorities are investigating the crash. 

Source: http://www.miamiherald.com/2014/02/09/3923316/5-killed-in-wrong-way- 
crash-in.html 



11. February 6, InsideNova.com - (Virginia) Two dead in crash on 1-95 near Quantico. 
Two people were killed in a crash involving two vehicles and a semi-truck on 
northbound Interstate 95 near Triangle, Virginia, February 6. Northbound lanes were 
closed for about 3 hours while police investigated the crash. 

Source: http://www.insidenova.com/news/local/northernva/updated-two-dead-in-crash- 
on-i— near-quantico/article cbca3226-8f42-lle3-9167-0019bb2963f4.html 
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Food and Agriculture Sector 

12. February 10, USA Today - (National) Uncle Ben's rice mix recalled after children 
get sick. Mars Foodservices recalled and the U.S. Food and Drug Administration 
advised consumer not to use Uncle Ben’s Infused Rice products sold in 5 and 25 pound 
bags to schools and institutional customers due to possible elevated levels of niacin that 
could cause illness. The recall and advisory were initiated after students at schools in 
Texas, Illinois, and North Dakota experienced allergic-like symptoms linked to eating 
the rice products. 

Source: http://www.usatodav.com/storv/news/nation/2014/02/10/uncle-bens-infused- 
rice-recall-children-sick/5362573/ 



13. February 8, U.S. Department of Agriculture - (National) California firm recalls 
unwholesome meat products produced without the benefit of full inspection. The 

U.S. Department of Agriculture’s Food Safety and Inspection Service announced that 
Rancho Feeding Corporation of Petaluma, California, recalled approximately 8,742,700 
pounds of beef products because it processed diseased and unsound animals without the 
benefit of federal inspection, leaving the products unfit for human consumption. The 
company also recalled more than 40,000 pounds of meat products in January. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-ai'chive/archi ve/20 1 4 
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Water and Wastewater Systems Sector 



14. February 10, Associated Press - (North Carolina) NC admits mistake, says arsenic 
topped safe level. North Carolina’s environmental agency acknowledged February 9 
that they initially misread test results February 4 stating water in the Dan River was 
safe for people after a massive coal ash spill. A sample taken February 3 revealed 
arsenic levels were four times higher than the maximum level people should have 
contact with. 

Source: http://www.timesdispatch.com/news/national-world/ap/nc-admits-rnistake- 
savs-arsenic-topped-safe-level/article 3c7 cca3e-92 12-11 e3-a5ed-00 1 7 a43b2370.html 

15. February 9, Charlotte Observer - (North Carolina) Ethanol spill flows into sewage 
treatment plant. Authorities asked Charlotte-Mecklenburg residents to avoid contact 
with water from Little Sugar Creek, Mallard Creek, and Rocky River in Cabarrus 
County February 9 until more testing is completed after an unknown amount of ethanol 
was illegally discharged and flowed into the Sugar Creek Wastewater Treatment Plant. 
Source: http://www.charlotteobserver.com/2014/02/Q9/4677139/charlotte- 
mecklenburg-authorities.html 

16. February 9, KFOR 4 Oklahoma City - (Oklahoma) Lake Draper water plant leaves 
thousands of Oklahomans without water. Homes and businesses in Oklahoma City 
were without water service for several hours February 9 after a frozen power cable 
snapped and caused the water plant at Lake Stanley Draper to stop pumping. Officials 
asked residents to continue to conserve water until the supply is replenished. 

Source: http://kfor.com/2014/02/Q9/lake-draper-water-plant-leaves-thousands-of- 
oklahomans-without-water/ 

[ Return to top ] 

Healthcare and Public Health Sector 

17. February 8, Las Vegas Sun - (Nevada) Blaze in attic of medical building likely an 
electrical fire. A building occupied by mostly medical businesses in Las Vegas 
suffered $225,000 worth of damage after a fire erupted February 8. The medical 
businesses will likely relocate for several weeks while repairs are made. 

Source: http://www.lasvegassun.com/news/2014/feb/08/blaze-attic-medical-building- 
likely-electrical/ 

18. February 7, Miami New Times - (Florida) University of Miami Health System loses 
records including Social Security numbers. The University of Miami Health System 
notified an indeterminate number of patients of its Department of Otolaryngology that 
while attempting to retrieve records stored at an offsite storage vendor in June 2013, 
they were infonned by the vendor that patients’ billing records were lost. A follow-up 
search in August confirmed that the records were not in possession of the university or 
the storage vendor. 

Source: http://blogs.miaminewtimes.com/riptide/2014/02/security breach at jackson 
mem.php 
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For another story, see item 16 
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Government Facilities Sector 

19. February 10, Portland Oregonian - (Oregon) Clackamas County offices, courts plan 
to open at 10 a.m. today; community college closed. Most school districts, all three 
campuses of Clackamas Community College, and the North Clackamas Parks and 
Recreations District in Oregon closed February 10 due to the possibility of severe 
winter weather. 

Source: 

http://www.oregonlive.com/clackamascounty/index.ssf/2014/02/clackamas county off 
ices court.html 

20. February 10, Chicago Sun-Times - (Illinois) Threatening email closes all DeVry 
University campuses. Officials closed all Chicago-area DeVry University campuses 
February 10 after the university and the Chamberlain College of Nursing received a 
threatening email February 9. 

Source: http://www.suntimes.com/news/25499065-418/securitv-issue-closes-all-devrv- 
university-campuses.html 

21. February 10, WABC 7 New York City - (New York) Brooklyn crash between 
ambulance, school bus leaves 3 hurt. Three adults were seriously injured and 16 
students suffered minor injuries after a collision between a New York City ambulance 
and a school bus in Brooklyn February 9. 

Source: http://abclocal.go.com/wabc/story?section=news/local/new york&id=9425565 

22. February 9, Sioux City Journal - (Iowa) Briar Cliff classes canceled Monday due to 
water main break. A water main break February 9 at Briar Cliff University in Sioux 
City forced the school to shut off its water, cutting off access to heat and running water 
for students while crews worked to repair the break. Classes were cancelled for 
February 10 and many students living on campus were temporarily moved until 
services were restored. 

Source: http://siouxcitvioumal.com/news/local/education/briar-cliff-classes-canceled- 
monday-due-to-water-main-break/article f05 If675-e20e-50ea-abca- 
dl7c5960768a.html 

23. February 9, Associated Press - (Maryland) Testing planned after Md. students 
exposed to TB. Officials at Watkins Mill High School in Montgomery County will 
notify students and staff members who came into contact with a student that tested 
positive for tuberculosis after learning that the individual carried the disease in school 
between October 2013 and January 2014. Scheduled testing will begin in March. 
Source: http://baltimore.cbslocal.com/2014/02/09/testing-planned-after-md-students- 
exposed-to-tb/ 

24. February 7, New York Times - (National) Ex-contractor at State Dept, pleads guilty 
in leak case. A former U.S. Department of State contractor pleaded guilty and was 
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sentenced February 7 for leaking information from a highly classified report to a news 
reporter in June 2009. 

Source: http://www.nytimes.corn/2014/02/08/us/politics/ex-state-department- 
contractor-pleads-guilty-in-leak-case.html?hpw&rref=politics& r=0 

25. February 6, CNN - (West Virginia) New water fears close West Virginia schools. 
Several schools around Charleston closed February 6 due to the lingering smell of 
methylcyclohexane methanol, apparently left over from a January chemical spill that 
leaked into Elk River and left about 300,000 people without water. 

Source: http://www.cnn.com/2014/02/06/us/west-virginia-chemical-spill/ 

T Return to top i 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

26. February 10, Softpedia - (International) CSRF vulnerability in Instagram allowed 
hackers to make private profiles public. A researcher identified and reported a cross- 
site reference forgery (CSRF) vulnerability in Instagram that could have been used to 
make private profiles public. Facebook issued a patch in September 2013, and a second 
patch February 4 to fully address the issue. 

Source: http://news.softpedia.com/news/CSRF-Vulnerabilitv-in-Instagram-Allowed- 
Hackers-to-Make-Private-Profiles-Public-425650.shtml 

27. February 10, The Register - (International) Snapchat bug lets hackers aim DENIAL 
of SERVICE attacks at YOUR MOBE. A Telefonica security consultant identified a 
bug in Snapchat that allows authentication tokens to be reused, which could be 
exploited to spam users and cause a phone running iOS to freeze or make the app lock 
up on Android phones. 

Source: 

http://www.theregister.co.uk/2014/02/10/snapchat token bug creates dos attack for 
ios android/ 

28. February 9, The Register - (International) RoR Paperclip infested by content type 
spoofing bug. A Ruby on Rails developer identified a cross-site scripting (XSS) flaw in 
the Ruby on Rails Paperclip uploader that could be extended to allow remote code 
execution. A new version of Paperclip was released that addresses the vulnerability and 
users were advised to update to it. 

Source: 

http://www.theregister.co.uk/2014/02/09/content type spoofing bug in ror paperclip/ 
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29. February 8, Softpedia - (International) Expert hacks private repositories on GitHub 
by combining 5 low-severity bugs. A researcher found and reported a way to gain 
access to private GitHub code repositories by combining five low-severity flaws to 
create a high-severity exploit. GitHub fixed the vulnerabilities and paid a $4,000 
reward as part of its bug bounty program. 

Source: http://news.softpedia.com/news/Expert-Hacks-Private-Repositories-on-GitHub- 
bv-Combining-5-Low-Severity-Bugs-425190.shtml 

For additional stories, see items 4 and 6 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. February 7, Greenfield Daily Reporter - (Indiana) Router problem disrupts NineStar 
Connect service. A faulty router at the Maxwell facility in Hancock County, Indiana, 
caused thousands of NineStar Connect customers to lose Internet, cable television, and 
phone service for about 2 hours February 7. Crews replaced a hardware chassis and 
restored services. 

Source: http://www.greenfieldreporter.com/view/local story/Ninestar-crashes- 
customers-aff 1391797363 
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Commercial Facilities Sector 

31. February 10, DuBois Courier Express - (Pennsylvania) DuBois apartment complex 
fire blamed on candle. A February 8 fire that destroyed the Seven Kitchens apartment 
complex in DuBois, Pennsylvania, and left about 35 residents displaced was ruled 
accidental and was believed to have been started by a candle. One resident and one 
firefighter were sent to a local hospital for treatment. 

Source: http://www.thecourierexpress.com/news/local/article cl33aba8-9258-lle3- 
9354-0019bb2963f4.html 

32. February 10, WBRC 6 Birmingham - (Alabama) Large apartment fire sends one 
firefighter to the hospital. Twenty-five residents of the Summer Rise Apartments in 
Center Point, Alabama, were left displaced by a February 9 fire that damaged 14 units. 
One firefighter was sent to a hospital for chest pains. 

Source: http://www.mvfoxal.com/storv/24679826/large-apartment-fire-sends-one- 
firefighter-to-the-hospital 
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33. February 9, Chicago Daily Herald - (Illinois) Fire guts several Mt. Prospect 
businesses. Several businesses and the Chamber of Commerce were damaged or 
destroyed and six apartment residents were left displaced after a fire broke out in a 
Mount Prospect building February 9. Power was cut off to nearby businesses and area 
streets were closed during the incident. 

Source: http://www.dailvherald.com/article/20140209/news/702099903/ 

34. February 9, Associated Press - (Pennsylvania) 29 people displaced after Philly fire. 
One person was treated for smoke inhalation and 26 adults and 3 children were 
displaced by a February 9 fire at an apartment building in northeast Philadelphia. 
Source: http://www.rnvfoxphilly.com/story/24674634/29-people-displaced-after-phillv- 
fire 

35. February 8, WITI 6 Milwaukee - (Wisconsin) Overnight fire destroys eight unit 
Oconomowoc apartment complex. Authorities are investigating the cause of a 3- 
alarm fire that destroyed an Oconomowoc apartment complex February 7 and left 
several displaced. 

Source: http://fox6now.com/2014/02/08/ovemight-fire-destroys-eight-unit- 
oconomowoc-apartment-complex/ 

36. February 8, WCAU 10 Philadelphia - (Pennsylvania) Best Buy, gym evacuated. A 
Best Buy and Planet Fitness in northeast Philadelphia were evacuated and closed 
February 8 after a natural gas odor was detected and authorities discovered a hissing 
sound coming from gas meters. Crews cleared the scene after determining that a heater 
inside the gym was the cause of the incident. 

Source: http://www.nbcphiladelphia.com/news/local/Best-Buy-Gvm-Evacuated- 
244566421.html 

37. February 7, Associated Press - (Vermont) Repairs made at Vt. mall after flooding. 
The Green Mountain Mall in St. Johnsbury was expected to fully reopen by February 
14 after sustaining significant damage from a water line rupture that flooded the area 
for nearly 2 hours with an estimated 1,500 gallons per minute February 3. 

Source: http://www.beaumontenterprise.com/news/article/Repairs-made-at-Vt-mall- 
after-flooding-5213729.php 

38. February 7, Manheim Township News - (Pennsylvania) Fire hits apartment unit at 
Brethren Village. An accidental fire at the Brethren Village apartments in Manheim 
Township broke out February 7 and forced more than 300 residents to evacuate for a 
short time and 30 residents to evacuate for nearly 5 hours. Two people were transported 
to the hospital and treated for smoke inhalation. 

Source: http://lancasteronline.com/manheimtownship/news/fire-hits-apartment-unit-at- 
brethren- village/article 08c3c700-9029-lle3-9aac-0017a43b2370.html 

39. February 7, Columbia Patch - (Maryland) 2 people transported, 3 cats rescued in 
Columbia apartment blaze. Three buildings of the Clary’s Crossing apartment 
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complex in Columbia, Maryland, caught fire February 7, sending 2 people to the 
hospital and leaving at least 16 residents displaced. 

Source: http://cohmbia.patch.eom/groups/poliee-and-fire/p/multiple -rescues- 
underwav-at-columbia-apartment-fire-officials-sav cd5ela63 



Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 
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personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
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